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Abstract 

Let A be a supersingular abelian variety over a finite field k which 
is k-isogenous to a power of a simple abelian variety over k. Write the 
characteristic polynomial of the Frobenius endomorphism of A relative to 
k as / = for a monic irreducible polynomial g and a positive integer e. 

We show that the group of k-rational points A(k) on A is isomorphic to 
(Z/(;(1)Z)® unless A’s simple component is of dimension 1 or 2, in which 
case we prove that A(k) is isomorphic to (Z/^(1)Z)“ x (Z/^^Z x Z/2Z)*’ 
for some non-negative integers a, h with a -\- b = e. In particular, if the 
characteristic of k is 2 or A is simple of dimension greater than 2, then 
A(k) - (Z/<;(1)Z)^ 

1 Introduction 

We list some notation and terminology for this paper as follows: k is a finite 
field of characteristic p with q elements. Let k be an algebraic closure of k. Let 
A be an abelian variety of dimension d defined over k. Let tt be the Frobenius 
endomorphism of A relative to k and / its characteristic polynomial. 

An abelian variety over k is elementary if it is k-isogenous to a power of 
a simple abelian variety over k. This definition is different from that of | p^ 
(see il, page 54]). An abelian variety A is elementary if and only ii f = g‘^ 
for some monic irreducible polynomial g over Q and some positive integer e. 
An arbitrary abelian variety is k-isogenous to a product of elementary abelian 
varieties, and / = Obi oT distinct monic irreducible polynomials gi over 
Q and positive integers e^. An abelian variety A over k is supersingular if each 
complex root of / can be written in the form product of some root 

of unity ^ and the positive square root yg. This definition is equivalent to the 
standard in literature (see section 3.2). 

Theorem 1.1. Let A be an elementary supersingular abelian variety overk and 
f = g^ as above. Then A(k) is isomorphic as an abelian group to (Z/5(1)Z)® 
except in the following cases: 
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(1) p = 3 mod 4, q is not a square, and A is h-isogenous to a power of a 

supersingular elliptic curve with g = + q, 

(2) p = 1 mod 4, q is not a square, and A is h-isogenous to a power of a two 

dimensional abelian variety with g = — q. 


In these two exceptional cases, there are non-negative integers a, b with a-\-b = e 
such that 


y4(k) ^ {Zlg{l)7.Y X X . 


This result is particularly striking when p = 2 or ^ is simple with d > 2 
for then A(k) ~z (Z/5(1)Z)®. In the latter case ^(k) will be either cyclic or a 
product of two cyclic groups, since e = 1 or 2. (See Proposition 3.3). 

We call an elementary supersingular abelian variety A exceptional if it be¬ 
longs to either of the two isogeny classes stated in Theorem 1.1 (1) and (2). We 
will show (see Proposition that if A is exceptional, then for every pair of 
non-negative integers a',b' with a' b' = e, there exists an abelian variety A! 
which is k-isogenous to A with 


y4'(k) ^ (Z/5(1)Z)“' X X Z/2Z)^ . 


In this paper Endk(A) denotes the ring of k-endomorphisms of A. Write 
Endk(^) = Endk(^) (8iz Q- Let Q[7r] be the Q-subalgebra of Endk(^) gen¬ 
erated by TT, let O be its maximal order, and Z[7r] its Z-subalgebra generated 
by TT. The group ^(k) is naturally an Endk(^)-module. Our results describe 
A(k) as a module over any subring of Endk(A) n Q[7r] that contains Z[7r]. The 
Galois group Gal(k/k) is (geometrically) generated by the Frobenius tt, the 
Z[7r]-module structure of A(k) is also its Galois module structure. 

For any prime number I we write (with parenthesis) for the localization 
of a commutative ring i? at /, this notation should not be confused with Ri that 
for the Z-adic completion of R. 

Theorem 1.2. Let A be an elementary supersingular abelian variety over k of 
dimension d. Let R be a ring with Z[7r] C i? C Endk(4l) n Q[7r]. Then there is 
a surjective R-module homomorphism 


: A(k) ^ (i?(p)/i?)^ 


such that the cardinality of the kernel of tp divides 2^. Furthermore, (p is an 
isomorphism when p = 2. 

Suppose A is a simple supersingular abelian variety over k and R the endo¬ 
morphism ring Endk(A) n Q[7r]: if d ^ 2, then A(k) =ii {R(^p-^/RY; if d = 2, 
then A(k) =« (i?(p)/i?)“ x for some non-negative integers a,b with 

a-\-b = e. (See Proposition |3.8| .) 

The group structure of the k-rational points and the Galois module structure 
of the k-rational points on an elliptic curve were studied by [|j (see also 
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Chapter V] and |^). The group structure of the k-rational points on a su¬ 
persingular elliptic curve was carried out in 0, Chapter 4, (4.8)] (see also 
Corollary |3.1C| ). Our present paper yields a description of this nature for higher 
dimensional abelian varieties. Our result for arbitrary supersingular abelian va¬ 
rieties are prepared separately in [ p^ . (Recently, independent of our work, the 
group structure of dimensional two supersingular abelian varieties was studied 
in 0.) 

We develop the following idea for studying the group structure of the rational 
points on an elementary supersingular abelian variety A over k: we show that 
the ring Z[C.yg] is a Bass order over some suitable subring (see section ||). Next 
we describe the Tate modules of A over Z[7r]. Finally the group structure of 
^(k) follows by viewing ^(k) as the kernel of the isogeny tt — 1 on A(k) (see 
section 3). Proofs of Theorems 1.1 and 1.2 lie in section 3. 

This paper is based on a portion of the author’s Berkeley Ph.D thesis. The 
author is deeply grateful to her advisor Professor Hendrik Lenstra for inspiration 
and guidance. The author also wish to thank Bjorn Poonen and Phil Ryan for 
their comments on an earlier version of this paper. The author was supported 
as a MSRI postdoctoral fellow while preparing this paper. 

2 Torsion-free modules over Bass orders 

2.1 Notions from algebra 

We begin this section with some notions from algebra and then some auxiliary 
results from algebraic number theory. The material largely follows |^, Introduc¬ 
tion and Chapter 3]. Here we assume all rings are commutative and modules 
are finitely generated. Let K he a local or global held of zero characteristic and 
Ok its discrete valuation ring or its ring of integers, respectively. 

Suppose L is a hnite dimensional separable RT-algebra. An O^f-algebra A is 
called an Ok- order (in L) if it is a hnitely generated projective -module (and 
A ^Ok K = L). a Z-order is simply called an order. Let A be an Oi^-order in 
L. We denote the unique maximal -order in L by Ol. If M is a A-module 
which is projective over Ok, then M is called a A-lattice. 

For any prime p of Ok, we denote by {Ok)p, Ap, Mp their p-adic comple¬ 
tions, respectively. If iF = Q and p = I for some prime number Z, then we write 
{Ok)i,Ai,Mi for their Z-adic completions. 

A A-module M is called torsion-free if am ^ 0 for any non-zerodivisor 
a G A — {0} and m £ M — {0}. In particular, when A is a domain then this 
is equivalent to the standard dehnition. A O/^-module is projective if and only 
if it is torsion-free |Q, H.4 (4.1)]. So M is a torsion-free A-module if and only 
if it is a A-lattice. If M is a torsion-free A-module, then it is torsion-free over 
Ok, hence there is a natural embedding M ^ M ®Ok where M ®Ok ^ has 
a natural L-module structure. If M ®Ok ^ is free of rank e over L for some 
integer e, then M is said of rank e. We shall note here that e is used to denote 
an arbitrary positive integer in this section. 
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Suppose L is a finite field extension of K. Denote by the discriminant 

(ideal) of A over Ok and := We recall that [Ol ■ A]^ A^/^ = 

^a/Ok l^L ■ A]^ I Ayv/o^. Let a be an integral element in L and 

h G Ok[X] be its (monic) minimal polynomial. Let A = Then = 

Ok A(/i). Let p be any non-zero prime ideal of Ok- Then Ap is semilocal and 
Ap = OqIp where the product ranges over all prime ideals Q of A lying over 
p. There is a bijective correspondence between these Q’s of A and the set of 
(monic) irreducible factors ho oih= [h mod p) G {Ok/p)[X]. (See Chapter 
I, Proposition 25, page 27].) If Q corresponds to ho in this bijection, then Q = 
{p, ho{a)) in A. We use the following notation throughout this paper: for any 
prime ideal v of Ol lying over a prime p of Ok, let ^(v/p), k{v/p) and g{v/p) 
denote the ramification index, residue field degree and decomposition degree, 
respectively. In particular, when A = Ol then k(Q/p) = dimoy^/pA/Q = 
deg(/io) and "i{Q/p) equals the multiplicity of ho as a factor of h. We have the 
following fundamental lemma. (This proof is due to Hendrik Lenstra.) 

Lemma 2.1. Let the notation he as above. Then the prime ideal Q is not 
invertible if and only if ho \ h and all coefficients of the remainder of h upon 
division by ho are in p^. The {OK)p-order Ap is not the maximal order if and 
only if there is a monic irreducible factor ho of h such that ht^ \ h, and all 
coefficients of the remainder of h upon division by ho are in p^. 

Proof. Write J := {p,ho{X)) in Ok[X], it is a prime ideal. The natural sur¬ 
jective map Ok[X] A induces a surjective map 9 : J / J'^ —*■ QjQ^ with 
Ker(0) generated by h. Write h in base ho and obtain h = r2/io + ’"i^o + ’’o 
for some r 2 ,r\,ro G Ok[X] with deg(ri),deg(ro) < deg{ho). Then h G J 
if and only if ro G p[X], while h G if and only if ri G p[X] and ro G 
p^[X]. So dimA/Q J/J2 = 1 -I- dimoy^/p p/p^ = 2 and hence dimA/g Q/Q"^ = 
dimA/Q J/— dimA/Q Ker(0) = 2 — dimA/g Ker(6*), where dimA/g Ker(0) is 0 
or 1. Therefore, dimA/g 1 if and only ii h G J^. We conclude that 

Q is not invertible if and only if h G J^, which is equivalent to ho^ \ h and 
all coefficients of the remainder of h upon division by ho are in p^. Thus the 
semilocal ring Ap is maximal if and only if Ag is maximal for each prime ideal 
Q over p, which is equivalent to Q is invertible, and so follows our assertion. □ 

Corollary 2.2. Let the notation be as in Lemma If ho = X — fS with 
P G Ok, then Q is not invertible if and only if h{P) = 0 mod p^ and h'[P) = 
0 mod p, where h' denotes the derivative of h. 

Proof. The condition ho | /i is equivalent to that h{P) = 0 mod p and h'{P) = 
0 mod p. The condition that all coefficients of the remainder of h upon division 
by ho are in p^ is equivalent to h{P) = 0 mod p^. □ 

2.2 Bass orders 

A reference for concepts in this subsection is Chapter 4]. Let K and Ok 
be as the previous subsection. Let L be a finite field extension over K. We 
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call an O/f-order A a Gorenstein order if every exact sequence of A-modules 
O^A^M^TV^O, in which M and N are A-lattices is split over A. If 
A has the additional property that every O^-order in L containing A is also a 
Gorenstein order, then we call A a Bass order. Note that being a Bass order 
is a local property, in other words, A is a Bass Oif-order if and only if Ap is a 
Bass (Ok) p-oider for every prime p in Ok- 

Proposition 2.3. The following are equivalent: 

(1) A is a Bass Ox-order; 

(2) OhjA is a cyclic A-module; 

(3) every ideal of A can be generated by two elements; 

(4) for every maximal ideal Q of A we have dim l)q / Q{0 l)q < 2; 

(5) the multiplicity of A at each maximal ideal Q is <2. 

Proof. The first three parts are equivalent according to |^, Theorem 2.1]. The 
last two parts are equivalent to (1) by |^, Theorem 2.1]. □ 


Remark 2.^. Here are some examples of Bass orders of interest. 

(i) If L is a quadratic field extension over AT, then [Ol)p/A p is cyclic over 
Ap for every prime p of Ox and thus A is a Bass order over Ox- 

(ii) All maximal orders in number fields are Bass orders. 

We are interested in describing torsion-free modules M over Ap of rank e for 
a prime ideal p of Ox. Recall that Ap is a semilocal ring whose maximal ideals 
are those prime ideals Q lying over p, so there is a corresponding decomposition 
of M as M = Hqi pMq. If Ap is maximal, that is Ap = {Ol)p, then AIq 
is torsion-free over the principal ideal domain {Ol)q of rank e, so Mq = Aq 
for all Q. Thus M = A®. If Ap is not maximal, then it is generally hard to 
classify such modules M in terms of orders in Lp (see ]^, Chapter 3]). However, 
torsion-free modules over Bass orders can be described as follows. 


Theorem 2.5 (Bass). Let K be a local field, Ox its discrete valuation ring, 
and A a Bass Ox-order in a finite field extension L over K. Then every inde¬ 
composable torsion-free A-module is a projective A'-module for some Ox-order 
A' in L containing A. 


Proof. Follows from the equivalencies in 
and the definition of Bass orders. 


Proposition 


2.3 


|, Theorem (37.13)] 

□ 
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2.3 Supersingular g-numbers 


This subsection contains a technical part of this paper, which lies in Lemma 2.7. 
We first of all introduce some notations. For any positive integer n, and any 
prime number Z, let n; and np) denote the Lpart and the non-Lpart of n respec¬ 
tively; let Cn = exp(2^!^^3), The primitive n-th roots of unity are the with 
positive integers v that are coprime to n. 

For the rest of the paper I is a prime number different from p. An algebraic 
number a G C is called a supersingular q-number if it is of the form C,^Jq. 
(See section 3.2 for its relationship to supersingular abelian variety.) Write 
= CmV^- Let K = Q(7r^) and let 0,0k be the ring of integers of Q(7r), AT, 
respectively. Obviously K = Q(Cm/(2.m)) and [Q(7r) : iF] = 1 or 2. In this 
paper, we write (ni, 712 ) for the greatest common divisor of two integers ni, 712 , 
we denote by (-) the Jacobi symbol. 

To prove the following two lemmas we need a few well-known and elementary 
results from algebraic number theory, which we recall here for the convenience 
of the reader: For any prime number p and positive integer n we have (1) 
^Q(Vp)/Q = a if a = 1 niod 4, and 4p if p ^ 1 mod 4; (2) ^ e Q(Cn) if and 

only if Aq(^)/q | 71 ; (3) Let p ^ 2, if p | n then Q{^{^)p) C Q(C„). 

Lemma 2.6. Suppose q is a non-square. Then Q(7r) = K if and only if 


(f) ^Q(^d5)/Q I (2) ^Q(Vp)/Q t mf{2,m) i/4 | tu. 

In this ease 2 | ')(v/p) for any prime v of O lying over p. 

Proof We note Q(7r) = Q (Cm/(2,m), v^Km/(2,m)) = K (y'pCm/(2,m)) • Thus 
Q(7r) = AT if and only if \/pCrnj{ 2 ,m) G AT, and if and only if K {^/p) = 
(\/Cm/(2,m)) ; that is, Q (Cm/(2,m); "x/p) ~ Q(Cm)- This is equivalent to 

(la) ^ e Q(Cm), and (2a) y/p i Q(Cm/(2,m)) if 4 | tti. 


which is equivalent to (1) and (2) respectively by the remark preceding this 
lemma. 

To show the second assertion it is enough to prove it for just one prime v 
over p since all primes lying over p are conjugate as Q(7r) is the cyclotomic field 
Q(Cm/(2.m))- We claim (2,p)p | In fact, if p = 2 then (1) implies 8 | m 

by the remark preceding this Lemma, so our claim follows; if p 2 then (1) 
implies p | m. But since p ^ 2, we have p | By the remark preceding 


this lemma, we thus see that Q(Cm/(2,m)) contains a quadratic field Q (( ~f^) 
over Q where p is totally ramified. Hence 2 | ^{v/p). □ 


Let £ be the set of supersingular g-numbers Cmx/? which satisfy the following 
conditions: p 2, q is not a square, p j tu, and 

(1) 4 I TO. when p = 1 mod 4; and (2) 4| |77i when p = 3 mod 4. 

For the proof of the lemma below, we remark here that a S Ap is a unit if 
and only if a is coprime to p. 
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Lemma 2.7. Let the notation he as above. If ^ {2} x 8 then 7 i['k\i = Oi. 
If {I, tt) G {2} X 8 then Z[7r]2 C O 2 ; let p be any prime ideal in Ok lying over 
2 , then 

(1) Q(7r) is a quadratic extension over K where p is split if p = ±1 mod 8, 
and p is inert if p = ±3 mod 8. 


(2) Z[7r]p is a local ring and a Bass {OK)p-order such that Op is the 
only (OK)p-order in Q(7r)p that properly contains Z[7r]p. Moreover, 
Op/Z[7r]p {Ok)pIp- 

Proof. If g is a square, then tt ^ 5 and Z[7r]; = Z[^m]i = Oi. For the rest of the 
proof, we assume q is not a square. We consider the following two cases. 


Case 1. I ^ 2 or p \ m. 


We claim Z[7r]i = Oi. Since I p, we note that Z[7r^]i = = 

{Ok)i. Suppose I 7 ^ 2, obviously Z[ 7 r^]i = {Ok)i Q Z[ 7 r]/ C Oi. If Q( 7 r) = K 
then Oi = {Ok)i and so Z[ 7 r]i = Oi. If Q( 7 r) 7 ^ K then [O : Z[Tr]]f \ AzIt,]/{Ok)'^ 
but since Z[ 7 r] ^ OxlAj/lx"^ - gCm/( 2 .m)), we have Az[^]/ok = OkA{X'^ - 
9 C/( 2 ,m)) = So = {Ok)i since 4g is coprime to 1. Therefore 

[O : Z[ 7 r]]; is the unit ideal and so Z[ 7 r]; = Oi. 

Now let Z = 2 and p \ m. By the remark preceding Lemma p.6| , \J{^)p G 

Z[Cm/( 2 ,m )]2 = Z[7r^]2 C Z[7r]2. Moreover, the norm of \J[^)p over Q is 
±p which is coprime to 2 so \J{^)p is a unit in Z[7r]2. Therefore, Z[7r]2 = 
Z[tt^J{^)p \2 = Z[Cfn\J{^)\ 2 - This proves our claim. 


Case 2. I = 2 and p\m. 


Write m = 2 ^m( 2 ). It is easy to verify that Q(7r) = Q(Cm( 2 ))Ck) where 
a = (23 y/P for some 2Tth primitive root of unity . We note that Q(Cm( 2 )) and 
Q(a) are linearly disjoint and that the minimal polynomial of a over Q(Cm( 2 )) 
is Zi = ^ ^ if j > 2, and is h — — p if j <2. 

Let p' be any prime ideal in the ring of integers of Q(Cm( 2 )) lying over 2. 
We show Z[7r]p/ = Z[Cm( 2 ) j Q^]p'- The inclusion Z[7r]p/ C Z[Cm( 2 ), <a]p' is trivial. 

Conversely, since ^ ^ we have C™( 2 ):Ct G Z[7r]p/. 


q2)’ 


Thus Z[^7,2(2) ’ That is, Z^Trjpf — 5 Hence, Z[7r]p/ — 

(Z[Cm(2)]p')M- 

If j > 2, then h = {X — 1)^^ mod p' . Note that Z[^m( 2 )]p' is a complete 
discrete valuation ring, so we have by Corollary ^. 2 ] that Z[7r]p/ is not maximal 
if and only if h{l) = 1 -\- q^^ =0 mod p' , that is, j = 2 and p = 3 mod 4. 

Similarly, if j <2 then h = {X — 1)^ mod p' and so Z[7r]p/ is not ma ximal if 
and only if p = 1 mod 4. Note Z[7r]2 = rip '|2 Lemma ^ and the 

above argument, Z[7r]2 is not maximal if and only if tt G 5. 

In the special case tt G f, we have K = Q(Cm(2)) and Q(7r) = is 

quadratic over K. Moreover, Z[7r]p = {Ok)p[^{^) p\ and p is totally ramified 












in Z[7r]p. This proves that Z[7r]p is a local ring. The decomposition of p in 
the quadratic extension Q(7r) over K corresponds to that of 2 in 
over Q, which is as in our assertion. Since Z[7r]p is a quadratic order over the 
complete discrete valuation ring {Ok)p, it is a Bass order by Remark ^ (1). 
As (e>_ftr)p-orders, Z[7r]p C Op = {Ok)^- There is an injection Z[jt]p/{Ok)p ^ 
OpI{Ok)p = {Ok)p, under which Z\t^\^I{Ok)p = for some positive 

integer i. In other words, Z[7rl„ = + and so 0„/Z[7rl„ = 

But Az[^]^/(o^)^ = (C>k)pA(A2-(^)p) = 4:{Ok)p and hence [Op : Z[Tr]p]^ = 
[{Ok)p : pT = 2^HOk)p \ 4(0/f)p. Thus i = 1, that is, Op/Z[7r]p ^ {Ok)p/p 
as (0/f)p-modules. Hence Op is the only (Oi^-jp-order in Q(7r)p that properly 
contains Z[7r]p. □ 


2.4 Torsion-free modules over Bass orders 


Let the notation be as in section |2.3| . For any ring R we use R* to denote its 
group of units. Henceforth in this section we assume that R is an order in Q(7r) 
containing Z[7r]. Let M be a torsion-free i?;-modules (as defined in section |2.l[) 
of rank e, our goal here is to describe all such modules. We recall that all 
modules are assumed to be finitely generated. 


Lemma 2.8. Let p be any prime ideal in Ok lying over 2. Let N be an inde¬ 
composable torsion-free Z[Tr]p-module. Suppose {1 ,tt) G {2} x S. If p is inert 
in Q(7r), then N = Z[7r]p or Op. If p is split, i.e., p = pip 2 for some prime 
ideals pi, p 2 in Q(7r), then N = Z[7r]p, Opi, or Op^. 


Proof. By Lemma 2.7, we know that Z[7r]p is a local ring and an (Ox)p-order, 
so we invoke Theorem 2.5. If N is projective over the local ring Z[7r]p then 
N ~ Z[7r]p. Otherwise, N is projective over Op, since Op is the only {Ok)p- 
order of Q(7r)p that properly contains Z[7r]p by Lemma 2.7 (2). Suppose p is 
inert in Q(7r), that is, Op is a discrete valuation ring then N =Og, Op. If p 
splits into pi and p 2 in Q(7r), that is, if Op = Op^ x Op^, then N =o^ Opi or 
Or,.,. Therefore 


P2 


— Z[7r]p 


This finishes the proof. 


□ 


Proposition 2.9. There is the following isomorphism of Ri-modules: 


M ^ 


Ri 


Rf if{l,TT)i{2}xE, 

UpiiiRtr X oln zfil,7T)G{2}x£ 


where p ranges over all prime ideals in Ok lying over 2, and Op, bp are non¬ 
negative integers such that ap-\-bp = e. 


Proof. Suppose {1,tt) ^ {2} x £. By Lemma 2.7, the Z;-order Ri is maximal 
and our assertion follows from the argument preceding Theorem 2.5. 
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Suppose G {2} x £. Since Mp is a torsion-free i?p-inodule of rank 

e, by the Krull-Schmidt-Azumaya theorem Theorem (30.6)], Mp can be 
expressed as a finite direct sum of indecomposables with the summands unique 
up to isomorphism and order of occurrence. If p is inert in Q(7r), then by 

+ bp = e such that 

V V 

? ^ ^Pl ^ ^P2 


Lemma 2.8 there are non-negative integers Up, bp with 


Mp ^R'^JxO 


. Now suppose p is split in Q(7r). Then Mp = i?! 
for some non-negative integers Op, bp, Cp] by comparing ranks in Q(7r)® 

Q(7r)p*’ X Q(7r)p‘) X Q(7r)p2, we are forced to have bp = Cp. Thus, Mp = 


R 7 X ip 


Pi X Opp'p = Rp^ X Op for Up, bp with Up + bp = e. Therefore 


M = X{Mp^n, \{{Rl-xOl-). 

P|2 p|2 


This finishes our proof. 


□ 


The following corollary is prepared for the next section. 

Corollary 2.10. If M is a torsion-free Ri-module of rank e then we have 
M/(7r — 1)M =fii (i?i/(7r — 1))® unless I = 2, q is not a square, and tt = 

in which case there are non-negative integers a, b with a-\-b = e such 

that 

M/{tt - 1)M {R^/in - 1))“ X (02/(7r - 1))^ 

Proof. First of all we show that m ^ 2^ ii and only if R 2 /{'k — 1) = 0, that 
is, TT — 1 G i? 2 - Indeed, m ^ 2^ implies Cm — 1 G Z[7r]2 C R^. Write tt — 1 = 
(Cm ~ + (V? ~ !)■ If p = 2 then (Cm — l)>/9 lies in a prime over 2 while 

Pq — 1 G i ?2 so their sum lies in R^', \i p ^ 2, then R^pq = R 2 and y/q — 1 
lies in a prime over 2 thus their sum also lies in R^. This proves our claim. 
Consequently, if to G 2^ then M/{tt — 1)M = {R 2 /{tt — 1))® since they are both 
trivial. By Proposition |2.9| , we have M/{tt — \)M =r, {Ri/{tt — 1))® unless 
I = 2,Tr G £ and to G 2^. By the definition of £, we have tt = CmV^ G £ if 
and only if q is not a square and TO=lor2ifp=l mod 4; while to = 4 if 
p = 3 mod 4. That is, we have I = 2, q is not a square and tt = ±w (^)g. □ 


3 Supersingular abelian varieties 

3.1 Preliminaries 

This subsection provides some auxiliary results on abelian varieties over finite 
fields. We shall quote from and without comment. 

Recall that I is any prime different from p. If G is an abelian group we denote 
by G[Z°°] the subgroup of all elements in G whose order is a /-power. For every 
k-isogeny r ■. A ^ A, we denote by A\r] the kernel of the induced map on v4(k) 
as abelian groups. The /-adic Tate module Ti{A) = lim^A[/"] is free of rank 
2d over Z;. Since the Frobenius endomorphism tt acts faithfully on it, Ti{A) is 
torsion-free Z[7r]i-module, and Vi{A) Ti{A) Q; is a Q[7r];-module. We 
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also know that Q[7r] is a semisimple Q-algebra. If the characteristic polynomial 
of the Frobenius is / = 0 *=! 9i' section 1, then 

t t 

i=l i=l 


In particular, if A is elementary so Q[7r] = Q[7r]/(g(7r)) is a field, and we note 
that Vi{A) = Q(7r)®. Thus Ti{A) is a torsion-free module of rank e over any 
Z;-order of Q(7r); containing Z[7r];. 

It is known that Ti defines a (covariant) functor from the category of abelian 
varieties A' over k with a k-isogeny r : A ^ A' to the category of Z[7r]i-lattices 
(as Zj-order) Ti{A') of Vi{A) with an injective Z[7r]i-module homomorphism 
r : Ti{A) Ti{A'). In fact, every Z[7r];-lattice of Vi{A) containing Ti{A) 
arises this way (see Proposition ^). Note Vi{A)/Ti(A) = Mapping 

the short exact sequence 0 ^ Ti{A) —> Vi{A) A\l°°] ^ 0 to that of A' by r 
induces an injective Z[7r]i-module homomorphism r : Ti{A) Ti(A') with cok¬ 
ernel Ti{A')/rTi{A) and an isomorphism Vi{A) Vi{A'). Let r~^Ti{A') be the 
pullback of Ti{A') C Vi{A') under this isomorphism, there is an isomorphism 
Ti{A')/rTi{A) = r~^Ti{A')/Ti{A). Applying the Snake Lemma to the above re¬ 
sulting diagram, we have r~^Ti{A')/Ti{A) = Ker(r)[l°°], where Ker(r) denotes 
the kernel (as abelian groups) of the induced map A(k) ^ A'(k). 


Proposition 3.1. For any prime I ^ p, let 9 : Vi{A)/Ti{A) ^ be the 

isomorphism as above. For every Z[Tr]i-lattice M containing Ti(A), there is an 
abelian variety A' with a \i-isogeny r : A —> A' such that M = r~^Ti(A') in 
Vi{A) and 0{M/Ti{A)) =Ker(r). 

Proof. Write G := 9{M/Ti{A)). We note that G is a finite subgroup of A(k) of 
Z-power order (coprime to p) and it has a induced Gal(k/k)-module structure. 
So it determines a finite etale subgroup scheme ^ of A over k with 5(k) = G. 
Take A! = AjQ and the obvious k-isogeny r : A ^ A', we see that Ker(r) = G. 
The argument preceding the proposition indicates that 9{r~^Ti{A')/Ti{A)) = G. 
Our assertion follows. □ 


Define Tp{A) = lim^A[p"] in an analogous manner. It is free Zp-module of 
rank between 0 and d (inclusive). (There is more on this in section 3.2.) 

To begin our study of the group structure of A(k), we first observe A(k) = 
A[7r — 1], and the following Proposition. 


Proposition 3.2. For any \i-isogeny r : A —> A, there is an isomorphism of 
Z[TT]-modules: A[r] = ])[; T;(A)/rT;(A) where I ranges over all prime numbers. 


Proof. The finite abelian group A[r] has the decomposition A[r] = ])([; A[r][Z°°], 
where each component is isomorphic to Ti{A)/rTi{A) by the argument before 
Proposition 3.1. All maps are Z[7r]-module homomorphisms. □ 
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3.2 Elementary supersingular abelian varieties 

It is well-known (see 0 Theorem 4.2]) that an abelian variety A over k is 
supersingular if and only if either one of the following three conditions holds: 
(1) the eigenvalues of the Frobenius tt are supersingular g-numbers; (2) the 
Newton polygon of >1 is a straight line of slope 1/2; (3) A is k-isogenous to a 
power of a supersingular elliptic curve. 

Note that A[p] = 0 is the same as Tp{A) = 0. We would like to clarify 
the following facts without proof: A supersingular abelian variety A over k has 
A[p] = 0 and the converse holds when d = 1 or 2. However, the converse does 
not always hold when d > 2. In fact, an abelian variety has A[p] = 0 if and only 
if its Newton polygon has no 0-slope segment, which does not imply it being a 
straight line of slope 1/2 when d > 2. 

For the rest of this section we assume that A is an elementary supersingular 
abelian variety over k whose Frobenius relative to k is tt. The characteristic 
polynomial of tt is / = for some monic irreducible polynomial g over Q and a 
positive integer e. Since Q[7r] = Q(7r) is a field, we fix an embedding of Q(7r) in 
C and identify tt with its image, which is an algebraic integer of the form Cm>/9 
for some primitive m-th root of u nity C,m the positive square root We 
resume the notation from section that is, K = Q(7r^) = Q(Cm/( 2 ,m))j its 
ring of integers Ok = and O the ring of integers of Q(7r). 

If given a supersingular g-number tt = CmV^’ describe the endomorphism 
algebra of A over k in the sense described on the proposition below. Let Q be 
the set of all supersingular q-numbers Cm\/? some primitive root of unity C/) 
such that either of the following two conditions is satished: (1) m = I or 2; (2) 
g is a square, {2,p)p\ m and p is of odd order in the group (Z/m(p)Z)*. 


Proposition 3.3. Suppose A is simple supersingular over k with Frobenius tt. 

(1) If TT G Q then e = 2 and End^(A) is a quaternion algebra over Q(7r); 

(2) If TT ^ Q then e = I and End^(A) is commutative and equal to Q(7r). 


Proof. Let v be any place of Q(7r) (including both finite and infinite primes). Let 
Cy denote the denominator of the Hasse invariant, inv„(End^(A)), of End^(A) 
at V. By 0 Theoreme 1] we have 


inv„(Endk(A)) 


ord„(7r)[Q(7r)t, : Qp] 
ord„(g) 


[Q(7r).„ : Qp] ^ j{v/p)k{v/p) ^ 


for all primes v lying over p, so et, = 1 or 2. Now Cy = 1 for all complex v and 
also for all finite primes v not lying over p, while = 2 for all real v. We have 
e = lcmy{ey) = 2 if either (I)’ v is real or (2)’ 'y{v/ p)k{v/ p) is odd; and e = 1 
otherwise. It is obvious that (I)’ is equivalent to (1). We show below that if v 
is not real prime then (2)’ is equivalent to (2): 

Suppose q is not a square: we claim that Cy = 1 for all hnite primes v over 
p. Now [Q(7r) : IF] = 1 or 2. The former implies 2 | j{v/p). Consider the 
latter case, if ^/p G Q(7r), then 2 | 'y{v/p) and so ey = I; otherwise, we would 
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have quadratic extensions Q(Cm) V^) ^ Q('^) ^ But if p was unramified in 
Q(7r)/itr, then it would be unramified in Q{Cm,^/p)/QiCm), which is absurd; 
so we must conclude that p is totally ramified in CI{tt)/K and hence 2 | 'y{v/p) 
and so = 1. 

Suppose g is a square: so that Q(7r) = Q(Cm)- Then for any finite prime v 
over p, we have that k{v/p) equals the order ofp in (Z/to(p)Z)*; Let denote 
the Euler phi-function here, then j{v/p) = which is odd if and only if 

{2,p)p\m. This finishes our proof. □ 

Remark 3.4- Suppose A is simple supersingular over k. If tt G S, then tt G Q if 
and only if d = 2. This follows from the above proposition and the definitions of 
£ and Q. The remark will be used in the proof of Proposition |3.8| in the future. 

Remark 3.5. Let A be a simple supersingular abelian variety with odd dimen¬ 
sion d > 2, then e = 1 and End^(A) must be commutative. Indeed, re¬ 
call ||l^ , Theoreme I] that 2d = e[Q(7r) : Q] and so it suffices to show 2 | 
[Q(7r) : df][Q(Cm/( 2 ,m)) : Q]- Either [Q(7r) : iL] = 1 or 2, in the former case 
[Q(Cm/( 2 .m)) : Q] = </'(w/(2, m)) > I and so is even. 

3.3 Module structures 

Let i? be a subring in Q(7r) with Z[7r] C R <Z Endk(Gl) n Q(7r). For any finite 
group G, we write ^G for its order. 

Lemma 3.6. Let M' C M” he modules over any ring R. Let r G R be such 
that R/rR is finite and r acts faithfully on M', M”. 

(1) If M' contains a free R-module of rank s as a submodule of finite index, 
then #M'/rM' = f#{R/rR)y. 

(2) If M' ,M" contain a free R-module of rank s as a submodule of finite index 

in M', M", respectively, then there are homomorphisms p' : M'/rM' —> 
M"/rM" and p” : M”/rM" M'/rM' with 

#Ker(p') = #Coker(p') = #Ker(p") = #Coker(p") | #M"/M'. 

Proof. (I) Since r acts faithfully on M' and i?®, the injective map r : M' M' 
induces an injective map r : R" ^ R". On the other hand, the given injection 
i?'* M' is of finite index, we thus have f/{M'/rM')-f/{M' / R^ = 

#{M'/Ry. Therefore, f/M'/rM' = #{R/rRY. 

(2) Let r act on the short exact sequence of i?-modules 0 ^ M' M" —> 
M"/M' 0, and apply the Snake lemma. We then get the desired map p' with 

#Coker(p') dividing By part (1), we have f/M'/rM' = f/M"/rM" 

as they both equal //{R/rR)". Thus #Ker(p') = #Coker(p'). Any finite R/rR- 
module N has an isomorphic dual Homz(Af, Q/Z), our assertion on p" follows 
by taking the dual of p'. □ 
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Proposition 3.7. Let r be an isogeny in R. Then there is an R-module homo- 
morphism 

<Pr ■■ A[r] —» 

i^p 

whieh is an isomorphism except when tt G £ in which case ^Ker((^r) and 
#Coker((/3^) are equal and divide 2^^^. 


Proof. By Proposition and the fact A[p\ — 0, we have A[r] = Y\i^p Ti/rTi. 
Recall that Ti is a torsion-free i?;-module of rank e, so we invoke Proposi¬ 
tion 2.9. If TT ^ 5 or p = 2, then Ti/rTi ^ {Ri/rRiY for each I Y P; we 
obtain the desired isomophism Now suppose tt € 5. Lemma |2.7| (2) im¬ 
plies ^OJR^ I #Op/Z[^]p = ff{OK)plp = Clearly «(p/2)p(p/2) | 

[K : Q] and [Lf : Q] = [Q(7r) : Q]/2 by Lemma ^ (1). For each I, we have 
a map Ti/rTi^{Ri/rRiY which is an isomorphism if Z Y 2. When 1 = 2, 
Lemma |3.6| indicates the size of its kernel and cokernel are equal and divide 


/RY){p) ■ Taking product over alH ^ p we obtain the desired map ipr with 
#Ker(pj.) = #Coker(pj.) and divides 


{#02fR2Yip) I ^(P) 
where the last number equals 2^^^. 


K(p/2)e(p/2)e 


,e[/f:Q] 

Ap) 


,e[Q(77):Q]/2 

Ap) 


□ 


Proof of Theorem 1.2. Let S = Z — pZ. By Proposition 3.7, there is an 
i?-module homomorphism : A[n\ =f ((Ti?)/i?)® for every n G S. Let Wn 
be the set of such homomorphisms. If to | n, then by passing to the largest 
submodule annihilated by to we see that any i?-module homomorphism (p„ 
maps the submodule A[m\ of A[n] to so there is a restriction map 

Wn Wm- Since the projective limit of a system of non-empty finite sets is 
non-empty, the projective limit of the sets Wn is non-empty. Therefore we can 
make a simultaneous choice of i?-module homomorphisms ipn that commute with 
the inclusions A[m] C A[n] and {{^R)/RY {{^R)/RY- Taking the injective 

limit over n G S, we get an i?-module homomorphism lirpAjn] ^ hm((Ti?)/i?)®, 
that is <p : A(k) ^ {R(^pYRY- Since A(k) and {Rf^pYRY both divisible as 

abelian groups, the cokernel of <p is also divisible, but it is finite and hence 
trivial. So Coker(ip) = lmCoker(p„) is trivial and <p is surjective. In ^(k) we 
have Ker(ip) = limKer(p„). Thus p is an isomorphism except when tt G £, in 
which case #Ker(p) divides 2^^^ since #Ker(p„) divides 2^^^ for each n. □ 


Proposition 3.8. Let A be a simple supersingular abelian variety over k with 
f = p®. Let R = Endk(A) n Q(7r). If p = 2 or d Y 2, then A(k) =_r {R(^pYRY■ 
If p Y 2 and d = 2, then there are non-negative integers a, b with a b = e and 

A(k) {Rip)/RY X io^p)/oY. 

Proof. Let p : A(k) ^ {Rf^p^RY be defined as in Theorem 1.2, which is an 
isomorphism unless tt G £. Suppose tt G £. Then #Ker(p) = #Coker(p) 
is a 2-power. Suppose d Y 2. Then e = 1 by Remark 3.4 and so T 2 is a 







14 


torsion-free i? 2 -inodule of rank 1. Recall that RT is a cyclotomic field. For 
any prime p in Ok lying over 2, write Tp for the p-adic completion of T 2 and 
Tp-Tp = {r&Rp\ rTp C Tp}. Then Tp 


Tp = Rp, so Tp is a fractional ideal of 
Rp. Recall from Lemma 2.7 that Rp is a Bass (C>i<')p-order and thus Tp =r^ Rp 
by § 2.6]. So T 2 =i {2 i ?2 and this induces isomorphism T 2 / 2 T 2 ^ R 2 / 2 R 2 
by Lemma Thus p is an isomorphism. Suppose d = 2. Then tt G £ 
implies tt = ±^{^)q and e = 2 by Remark |3^. In this case, p = 2, so by 

Proposition |2.9|, we have A[n] = Y\i^pTi/nTi = x for all 

n G S = Z — pZ. Take injective limit both sides over n G S', we have 

A(k) - lim((ii?/i?)“ X i^O/Of) (%)/i?)“ X (0(p)/0)^ 


This finishes our proof. 


□ 


3.4 Group structures 


In this subsection we shall apply the results of the previous subsection to our 
study of the group structure of A(k). 


If 4 is exceptional, Q(7r) = soO 

By Lemma 2.7 (2) we notice 02/Z[7r]2 = Z 2 / 2 Z 2 = Z/2Z. 



Proof of Theorem 1.1. Apply Corollary ^.10| to M = Ti{A) and R = Z[7r]. 
Now 

A{k) -zH (Z[7r]/(^ - 1))« -z iZ/g{l)Zr 

unless A is exceptional, in which case the argument preceding the proof implies 
that (tt— l)/2 G O 2 while (tt— l)/4 ^ O 2 . Since #02/(7r—1) = #Z[7r]2/(7r—1) = 
|g(l)| 2 , we have 

02/(7r- 1) ^z, Z 2 / 2 Z 2 X Z2/4^Z2. 

Hence there are non-negative integers a, b with a -I- 5 = e such that 


A(k) ^zH (Z[7r]2/(7r- 1))“ X (C>2/(7r- 1))^ X nip2(Z[7r]//(7r- 1))'= 

5iz ((Z2/g(i)Z2)“ X iZ2/^Z2 X Z 2 / 2 Z 2 )') X 
(Z/5(1)Z)“ X (Z/^Z X Z/2Z)K 


This proves our theorem. 


□ 


Proposition 3.9. Let the notation he as in Theorem 1.1. If A is exceptional, 
then for every pair of non-negative integers a', b' with a' -\-b' = e there exists an 
abelian variety A' isogenous over k to A such that 

A'(k) ^z (Z/g(l)Z)“' X (Z/^Z X Z/2Zf. 


Proof. Let A be exceptional. By Theorem 1.1, there are non-negative integers 
a, b with a -I- 6 = e such that T 2 —z[ 7 i -]2 Z[7r]2 x O 2 and 


A(k) ^z (Z/5(1)Z)“ X (Z/^Z X Z/2Z)^ 
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If b' = b, then we are done. If b' < b, let 


\b-b’. 


M = Z[ 7 r]“ X X (iZ[ 7 r] 2 ) 

if b' > b, let 

M = Z[7r]“' xO^', 

in either case M =z[ 7 r ]2 ^[Tr]^ x C >2 ■ By the argument preceding the proof of 
Theorem I.l, we know that O 2 Q ^Z[tt ]2 C Q( 7 r) 2 . By Proposition there 
exits an abelian variety A! over k with T 2 {A') = M and a k-isogeny A A' 
with A[r\ = T 2 {A')/T 2 {A) while Ti{A') = Ti(A) for all / 7 ^ 2. Thus 

^'(k) = Ui^pTiiA')/{7r-l)TiiA') 

=ZM (Z2[7r]/(7r - 1))“' X (C>2/(7r - 1))^' X ni5^2(ZM//(7r - 1))® 
(Z/g(l)Z)“' X (Z/^Z X Z/2Zf. 


This finishes the proof. 


□ 


Corollary 3.10. Suppose A is a simple supersingular abelian variety over k 
of dimension d > 2 with f = 5 ®, then A(k) =z (Z/ 5 ( 1 )Z)® with e = 1 or 2. 
If d = 1, then A is a supersingular elliptic curve and A(k) =z (Z/g(l)Z)® or 
^(k) =z Z/^^Z X Z/2Z; that latter case occurs only when q is not a square 
and p = 3 mod 4. If d = 2, then A is a simple supersingular abelian surface and 
24(k) =z (Z/g(l)Z)® or ^(k) Z/^^Z x Z/2Z; that latter case occurs only 

when q is not a square and p=l mod 4. 


Proof. If A is simple over k of dimension d > 2, then A is never exceptional, so 
24(k) =z (Z/( 7 ( 1 )Z)®, where e = 1 or 2 as we have seen in Proposition 3.2. 

If A is an elliptic curve, then 24(k) =z (Z/g(l)Z)'^ unless A is exceptional in 
which case A(k) ~z (Z/ff(l)Z)® or A(k) ~z Z/^^Z x Z/2Z. Both cases may 


occur because of Proposition (This result can be found in Chapter 4, 


(4.8)].) 

If A is of dimension 2, then A(k) =z (Z/g(l)Z)^ unless A is exceptional in 
which case A(k) ^z {Zlg{\)Zf or yl(k) ^z Zf^Z x Z/2Z. □ 


In particular, by Remark |3.5| , if A is simple supersingular of odd dimension 
d> 2, then A(k) = Z/g{\)Z. 
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